CVE-2024-10324 MEDIUM

CVE-2024-10324: RomethemeKit For Elementor <= 1.5.2 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

Vendor Rometheme
Product RTMKit
Weakness CWE-1230
Published January 24, 2025
Last update April 8, 2026
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

The RomethemeKit For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.5.2 via the register_controls function in widgets/offcanvas-rometheme.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

Explanation of Vulnerability in Simple Terms

02Summary

RTMKit versions up to 1.5.2 contain an information disclosure vulnerability. An authenticated user with low privileges can read sensitive data they should not have access to. The vulnerability requires network access and does not require user interaction. No integrity or availability impact occurs.

What an attacker can do

03Attacker Capabilities

Read sensitive data accessible only to higher-privilege users.

Potential impact on your site

04Site Impact

User account data or configuration details may be exposed to low-privilege users.

Conditions required to exploit

05Prerequisites

Attacker must have a low-privilege account on the site.

Key dates

06Disclosure timeline

January 24, 2025 CVE published
April 8, 2026 Record updated